CVE-2026-51773

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

CVE-2026-51773: Server-Side Request Forgery (SSRF)

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

EUVD-2026-87084

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

Linux Distros Unpatched Vulnerability : CVE-2026-97982

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of...

Linux Distros Unpatched Vulnerability : CVE-2026-93217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a...

Linux Distros Unpatched Vulnerability : CVE-2026-93218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: skip device-private PMDs in madvisefreehugepmd madvisefreepterange checks pmdtranshugepmd unlocked, then madvisefreehugepmd takes pmdtranshugeloc...

ROS-20260925-73-0077

The vulnerability of the linkstatususerformat function in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c file of the Ethernet network adapter driver for the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker t...

ROS-20260925-73-0162

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

ROS-20260925-73-0146

The vulnerability of the tegraxusbportunregister function in the drivers/phy/tegra/xusb.c module of the Linux kernel’s PHY driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260925-73-0176

The vulnerability of the recvwork function in the drivers/block/nbd.c module of the Linux block devices driver leads to mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-98621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow occurs in the hinic driver due to improper validation of mailbox segments. The function check mbox seq id and seg len allows the last segment, identified by the se...

PT-2026-98469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the FC BSG transport allocates job-request using a user-supplied request len via memdup user. For FC BSG HST VENDOR, the fc bsg host...

ROS-20260925-73-0013

The vulnerability of the mt7921usbsdiotxprepareskb function in the drivers/net/wireless/mediatek/mt76/mt7921/mac.c file of the Mediatek wireless communication adapter driver module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker ...

Linux Distros Unpatched Vulnerability : CVE-2026-96749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built fr...

ROS-20260925-73-0078

The vulnerability of the rt2x00libremovehw function in the drivers/net/wireless/ralink/rt2x00/rt2x00dev.c file of the Ralink wireless adapter driver in the Linux operating system kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-51773

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

PT-2026-98801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the ntfs cluster free from rl nolock function incorrectly increments the nr freed counter even when ntfs bitmap clear run fails. This occurs...

PT-2026-98543

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the idpf driver where Tx/Rx DIM works are not drained before the memory they reside in is freed. The tx dim and rx dim works are embedded in the idpf q vector...

PT-2026-98475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the scsi qla2xxx driver. The qla25xx ctrlvp iocb function calculates a map index using the vp index variable and writes to the vp idx map array without...

PT-2026-98481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ath9k htc wifi driver where usb device id is stored. Because of the presence of dynamic IDs, usb device id is not guaranteed to remain valid beyond the probe phase...